Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: JoomSky Component: Js Help Desk Clear all filters
TI-2025-22171 CVE-2025-30901 · GHSA-m957-8r27-px6j

WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help D…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00885 Published 2025-04-01 No fix listed CWE-98
TI-2025-22156 CVE-2025-30886 · GHSA-964p-mw8f-wq7h

WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows SQL Injection.This issue affects JS Help Desk: from n/a through <= 2.9.2…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00541 Published 2025-04-01 No fix listed CWE-89
TI-2025-22152 CVE-2025-30882 · GHSA-2mc3-h3h3-g4xq

WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00612 Published 2025-04-01 No fix listed CWE-22
TI-2025-22150 CVE-2025-30880 · GHSA-78vh-6phv-92x4

WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability

Priority LOW 33

Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.9.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00506 Published 2025-04-01 No fix listed CWE-862
TI-2025-22148 CVE-2025-30878 · GHSA-v8gm-mmxg-v36w

WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00645 Published 2025-04-01 No fix listed CWE-22
TI-2022-23185 CVE-2022-46840 · GHSA-jcm8-w5wv-cxc6

WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control

Priority LOW 25

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00453 Published 2024-12-13 No fix listed CWE-862
TI-2022-23183 CVE-2022-46838 · GHSA-v2q3-j5hx-299f

WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability

Priority MEDIUM 47

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00732 Published 2024-12-13 No fix listed CWE-862
TI-2024-34584 CVE-2024-51670 · GHSA-4998-4cwm-v6xh

WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-11-09 No fix listed CWE-79
TI-2024-28927 CVE-2024-43274 · GHSA-grx6-q36w-3gr9

WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Suppor…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00442 Published 2024-11-01 No fix listed CWE-862
TI-2023-10754 CVE-2023-25444 · GHSA-q65p-758p-5fmq

WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin:…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00841 Published 2024-05-17 No fix listed CWE-434
TI-2022-23356 CVE-2022-47151 · GHSA-xv35-3wcg-v2qf

WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00443 Published 2024-04-17 No fix listed CWE-89